$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa File: 8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa (raw, json) Hash identifier: xnOkqSI09CIIpFiLHqbx6miXN6f1rpMusG15I24Rzck= Subject key identifier: 5E:CD:2D:30:15:5A:B2:B2:B5:B0:F8:A3:88:9F:56:59:A4:8A:06:A4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849C904E5729E9C691DC95A0B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 130.137.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e5:72:9e:9c:69:1d:c9:5a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=709c7fb8-ffeb-4739-a5cf-dfe5a72ce008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:a8:2b:ec:f5:da:e4:d0:82:90:57:5a:40: fc:04:07:f9:12:a5:88:89:a2:8a:03:bb:19:95:9b: bd:e2:65:c0:a1:15:3e:5b:d8:9d:17:9b:6c:fa:05: 3b:6d:71:c9:2b:1e:8d:bb:36:f6:2e:9e:b6:00:c9: 75:31:00:44:f3:9d:2e:38:f7:37:31:2b:97:22:5d: 2e:ed:72:97:47:64:66:ab:e1:d0:48:77:bd:34:50: c1:99:1f:87:f2:54:68:b7:75:ad:2a:40:a0:1c:67: 6f:bd:ce:25:c9:ee:18:ac:05:1d:2a:b4:dc:6c:4f: fd:b7:e9:42:e1:5d:53:6c:a8:bb:1d:27:db:f5:a5: 72:df:c1:e0:6a:67:59:47:a2:e9:88:60:1e:e9:ac: d8:bb:5e:97:b9:33:70:cb:e3:b3:77:58:d9:71:f6: 43:4d:23:7c:82:66:95:44:f5:19:db:dc:6a:04:2a: a1:42:fd:e2:71:cd:55:f1:00:15:fc:2d:f5:61:f3: a4:ac:6d:fa:e4:35:43:17:1f:f7:c8:f3:65:0c:03: a1:50:ca:c3:c5:2a:1c:24:32:19:8c:09:90:bb:75: 44:06:08:06:94:9a:4a:ef:c4:a7:72:eb:ff:79:c1: d0:45:d8:42:bc:b5:d3:71:5f:79:81:f7:19:bc:10: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:2D:30:15:5A:B2:B2:B5:B0:F8:A3:88:9F:56:59:A4:8A:06:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:09:ea:8e:c2:d6:48:25:89:7a:b2:3f:5d:a4:99:82:4b:93: d8:69:2b:88:b6:17:da:33:11:a5:b6:7a:85:94:bc:7c:74:9a: d3:1d:bc:f2:0f:4d:41:8e:56:1f:7b:b0:53:a8:ea:6b:82:74: 11:59:2c:6f:be:25:69:4b:61:6b:8c:e3:90:02:04:69:17:20: 6c:ed:8a:8a:87:be:68:fd:64:f8:54:0f:33:80:87:66:37:56: 88:86:61:26:0f:6e:0e:b6:d3:14:26:77:ca:f3:ed:87:bc:cc: 4f:37:a4:fe:e5:fb:af:11:d6:62:cc:fa:8c:f0:f6:b2:23:22: f5:47:81:4d:79:78:91:e5:55:bc:ca:82:a7:b2:d1:f3:15:f7: 1e:b5:66:b7:c4:45:2b:7c:0f:19:ea:78:e3:02:c1:7e:db:2f: 8f:2b:4e:61:f4:61:c9:30:d7:97:34:34:ca:ad:74:37:a4:a5: b5:15:ec:6d:74:8b:d8:13:3f:f2:d9:8a:cf:ac:7b:97:90:8b: f5:d1:51:94:58:cc:b2:be:19:40:ad:4d:27:1a:1c:94:14:86: 68:9a:d7:22:7a:63:95:6d:4d:80:d3:4a:ef:62:24:75:05:3c: 27:bc:74:5a:56:73:2c:dd:fa:d6:33:54:18:a6:b5:72:cd:03: db:ea:aa:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOVynpxpHclaC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NzA5YzdmYjgtZmZlYi00NzM5LWE1Y2YtZGZlNWE3MmNlMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAmoK+z12uTQgpBXWkD8BAf5EqWIiaKKA7sZ lZu94mXAoRU+W9idF5ts+gU7bXHJKx6Nuzb2Lp62AMl1MQBE850uOPc3MSuXIl0u 7XKXR2Rmq+HQSHe9NFDBmR+H8lRot3WtKkCgHGdvvc4lye4YrAUdKrTcbE/9t+lC 4V1TbKi7HSfb9aVy38HgamdZR6LpiGAe6azYu16XuTNwy+Ozd1jZcfZDTSN8gmaV RPUZ29xqBCqhQv3icc1V8QAV/C31YfOkrG365DVDFx/3yPNlDAOhUMrDxSocJDIZ jAmQu3VEBggGlJpK78Sncuv/ecHQRdhCvLXTcV95gfcZvBAkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7NLTAVWrKytbD4o4ifVlmkigakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGZiM2Y3NzMtOGFhMy0z ZGQ1LWJjZjctMzlmNGNiZGZlZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIJ6o7C1kgliXqyP12kmYJLk9hpK4i2F9ozEaW2eoWUvHx0mtMdvPIP TUGOVh97sFOo6muCdBFZLG++JWlLYWuM45ACBGkXIGztioqHvmj9ZPhUDzOAh2Y3 VoiGYSYPbg620xQmd8rz7Ye8zE83pP7l+68R1mLM+ozw9rIjIvVHgU15eJHlVbzK gqey0fMV9x61ZrfERSt8DxnqeOMCwX7bL48rTmH0Yckw15c0NMqtdDekpbUV7G10 i9gTP/LZis+se5eQi/XRUZRYzLK+GUCtTScaHJQUhmia1yJ6Y5VtTYDTSu9iJHUF PCe8dFpWcyzd+tYzVBimtXLNA9vqqjY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:27 2025 by rpki-client